Overview

overview

10

Static

static

caa5f99be4...b7.exe

windows7-x64

10

caa5f99be4...b7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    caa5f99be4b971b6a215b47e2f0178991440ac7f421f19ffa4d1fa0cf67513b7

  • Size

    184KB

  • Sample

    221012-rz2jhaffh6

  • MD5

    671da604dfb5ce0c40f4681bcaf66250

  • SHA1

    c7baea6b0556b67a5d075ba2b711494b285c2c84

  • SHA256

    caa5f99be4b971b6a215b47e2f0178991440ac7f421f19ffa4d1fa0cf67513b7

  • SHA512

    428dc6778c8900fd4960cda09ff2908dda1d20c13b08277c0d1927fd9282bb88865b1b2b264b1d451e6018ffa28311adc2e1e544534c8d483f626583166e84a4

  • SSDEEP

    3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1Zw:GWkWXV9wUezUroW+tCmCCfNGv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      caa5f99be4b971b6a215b47e2f0178991440ac7f421f19ffa4d1fa0cf67513b7

    • Size

      184KB

    • MD5

      671da604dfb5ce0c40f4681bcaf66250

    • SHA1

      c7baea6b0556b67a5d075ba2b711494b285c2c84

    • SHA256

      caa5f99be4b971b6a215b47e2f0178991440ac7f421f19ffa4d1fa0cf67513b7

    • SHA512

      428dc6778c8900fd4960cda09ff2908dda1d20c13b08277c0d1927fd9282bb88865b1b2b264b1d451e6018ffa28311adc2e1e544534c8d483f626583166e84a4

    • SSDEEP

      3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1Zw:GWkWXV9wUezUroW+tCmCCfNGv

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks